Compile kernel enable iptables and NetFilter

In the network Packet Filtering Framework (netfilter) section There are also two additional configuration sections--core NetFilter configuration (Core netfilter config) and IP: NetFilter configuration (ip:netfilter).

1. Core NetFilter Configuration

Some of the important options that are included in the core NetFilter configuration section should be enabled:

L Comment Match Support (Comment);

L FTP Support (FTP protocol supported);

L Length match support (packet length matching supported);

L Limit match support (limit matching);

L MAC address match support (MAC matching supported);

L Mark Target Support (Mark);

L NetFilter Connection Tracking Support (netfilter connection tracking);

L NetFilter log over Nfnetlink interface (NetFilter logs via Nfnetlink interface);

L NetFilter NetLink Interface (NetFilter NetLink interface);

L NetFilter xtables Support (NetFilter xtables);

L match support for State;

L String Match Support (string matching supported).

2. Ip:netfilter Configuration

After completing the core netfilter configuration, we begin to enter the Ip:netfilter configuration section. The options that need to be enabled in this section are as follows:

L ECN Target Support (ECN targeting);

L Full NAT (complete NAT support);

L IP address range match support (IP ranges matching supported);

L IP Tables support (IP tables supported, Filtering/masq/nat required);

L IPV4 Connection Tracking Support (IPv4 connection tracking supports, Nat required);

L Log target support (log targeted);

L Masquerade Target Support (masquerade);

L Match support for owner (owner matching);

L Packet Filtering (packet filter support);

L Packet mangling (package modification support, often used to change packet routing);

L Raw Table support (raw tables supported, notrack/trace required);

L Recent Match support (recent);

L REJECT Target Support (REJECT);

L TOS Match Support (TOS matching);

L TOS Target Support (TOS targeting);

L TTL match support (TTL matching supported);

L TTL target support (TTL destination supported);

L Ulog Target Support (Ulog).

In the 2.6 series kernel, the individual compilation sections undergo a major reorganization. In the old 2.4 series kernel, the Ip:netfilter configuration section is under the Networking option and is only visible if the network Packet filtering option is enabled.